Trapster, a crowdsourcing-based online service which warns iPhone, Android, BlackBerry, Garmin and TomTom GPS owners of police speed traps, announced yesterday millions of e-mail addresses and passwords may have been compromised. Trapster suffered two security breaches; one after which it released a warning to users and a second, to which it responded saying it’s “not sure” if any data was actually harvested.

“If criminals did collect the service’s complete user list, the breach would be 25 times larger than the Gawker hack last month, when details of more than 400,000 Gawker accounts were published on the Internet.”

Even if only a small fraction of Trapster’s 10 million users were compromised, the percentage may translate into hundreds of thousands if not millions of e-mails and passwords compromised. Moreover, some usernames and passwords obtained last month in the Gawker hack were also used to compromise some users’ twitter accounts sharing the same security data. There is no reason to assume the same may not happen with Trapster users.

While it may be too late for users who’ve already been compromised, Trapster announced it has rewritten the service’s code and “implement[ed] additional security measures to further protect your data.”

Trapster is but the latest to join a list of mobile security issues and updates lately. Researchers demonstrated at the Black Hat DC Conference a new way of attacking PCs and Smartphones; via USB. Before that came the Cisco Annual Security Report which indicated increased scammers attention towards non-Windows platforms, and an official admission of the open-source Android’s vulnerability.